CVE-2026-116124

EUVD-2026-109617
A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
6.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 36.68%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
gnomelibgsf
1.14.0
CNA
gnomelibgsf
1.14.1
CNA
gnomelibgsf
1.14.2
CNA
gnomelibgsf
1.14.3
CNA
gnomelibgsf
1.14.4
CNA
gnomelibgsf
1.14.5
CNA
gnomelibgsf
1.14.6
CNA
gnomelibgsf
1.14.7
CNA
gnomelibgsf
1.14.8
CNA
gnomelibgsf
1.14.9
CNA
gnomelibgsf
1.14.10
CNA
gnomelibgsf
1.14.11
CNA
gnomelibgsf
1.14.12
CNA
gnomelibgsf
1.14.13
CNA
gnomelibgsf
1.14.14
CNA
gnomelibgsf
1.14.15
CNA
gnomelibgsf
1.14.16
CNA
gnomelibgsf
1.14.17
CNA
gnomelibgsf
1.14.18
CNA
gnomelibgsf
1.14.19
CNA
gnomelibgsf
1.14.20
CNA
gnomelibgsf
1.14.21
CNA
gnomelibgsf
1.14.22
CNA
gnomelibgsf
1.14.23
CNA
gnomelibgsf
1.14.24
CNA
gnomelibgsf
1.14.25
CNA
gnomelibgsf
1.14.26
CNA
gnomelibgsf
1.14.27
CNA
gnomelibgsf
1.14.28
CNA
gnomelibgsf
1.14.29
CNA
gnomelibgsf
1.14.30
CNA
gnomelibgsf
1.14.31
CNA
gnomelibgsf
1.14.32
CNA
gnomelibgsf
1.14.33
CNA
gnomelibgsf
1.14.34
CNA
gnomelibgsf
1.14.35
CNA
gnomelibgsf
1.14.36
CNA
gnomelibgsf
1.14.37
CNA
gnomelibgsf
1.14.38
CNA
gnomelibgsf
1.14.39
CNA
gnomelibgsf
1.14.40
CNA
gnomelibgsf
1.14.41
CNA
gnomelibgsf
1.14.42
CNA
gnomelibgsf
1.14.43
CNA
gnomelibgsf
1.14.44
CNA
gnomelibgsf
1.14.45
CNA
gnomelibgsf
1.14.46
CNA
gnomelibgsf
1.14.47
CNA
gnomelibgsf
1.14.48
CNA
gnomelibgsf
1.14.49
CNA
gnomelibgsf
1.14.50
CNA
gnomelibgsf
1.14.51
CNA
gnomelibgsf
1.14.52
CNA
gnomelibgsf
1.14.53
CNA
gnomelibgsf
1.14.54
CNA
gnomelibgsf
1.14.55
CNA
gnomelibgsf
1.14.56
CNA
gnomelibgsf
1.14.57
CNA
gnomelibgsf
1.14.58
CNA
gnomelibgsf
1.14.59
CNA
gnomelibgsf
1.14.60
CNA
Debian logo
Debian Releases
Debian Product
Codename
libgsf
bookworm
vulnerable
bookworm (security)
vulnerable
forky
vulnerable
sid
vulnerable
trixie
vulnerable